An example of a prompt injection problem in the wild.

We're going to be hearing about these kinds of issues a lot more.

It's not that there aren't more issues, it's that no one has looked for them yet.

They're lurking in every LLM-backed product with tool use.